Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa
File:                     8c842234-5cac-3023-af77-9c58ff2c7c7c.roa (raw, json)
Hash identifier:          4BItgz58D8oWO4F261AjbDxMcfybd6qJD/YD9IqQU5Q=
Subject key identifier:   86:47:DB:A8:1B:44:D8:E5:2A:AF:DF:92:CC:E0:B4:3F:F3:BE:C5:ED
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584E48247C5A1808538F383FFD70
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     49
IP address blocks:        129.6.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7c:5a:18:08:53:8f:38:3f:fd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=466782e8-d661-4813-b4d3-78a836120d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:b7:3e:34:ce:49:69:c7:75:51:d8:51:98:
                    4f:f4:26:47:84:e3:5e:df:7c:8d:b2:cd:da:cd:55:
                    5a:c1:78:c2:e4:8d:1f:fc:6a:8d:1e:2c:8c:86:a5:
                    f3:bf:13:0a:2f:75:e5:f5:dc:89:0d:cb:28:99:db:
                    53:f8:f4:a0:f5:01:40:6f:d6:ba:5e:06:50:15:77:
                    99:6f:d7:a1:98:ac:20:5d:2e:01:24:27:50:d9:06:
                    c1:53:9d:46:f1:08:4e:1b:46:8f:c5:cc:e0:68:29:
                    45:84:ec:1e:66:7c:0a:59:08:fd:39:9c:91:ba:28:
                    47:43:8e:6f:37:86:51:cd:56:ce:83:29:3e:f1:5d:
                    0a:42:d3:36:52:39:4a:1b:1a:0f:27:15:49:fd:7f:
                    18:09:26:41:d4:86:27:cf:09:a9:d0:86:e9:7a:ae:
                    15:df:00:97:bf:62:91:00:45:70:79:f3:7c:04:83:
                    dd:21:16:95:d6:b8:0e:fc:23:c7:ab:9a:39:f6:c1:
                    c1:a6:ed:37:d7:eb:25:3f:2b:8e:67:48:84:fb:32:
                    62:8c:f4:0d:c3:2a:ca:db:16:18:b6:5d:95:97:60:
                    f7:cd:d1:06:43:2c:e4:3b:bc:bc:66:43:ac:f3:fa:
                    27:15:fa:91:ca:b1:ca:33:e4:fd:9e:10:2f:a9:2c:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:DB:A8:1B:44:D8:E5:2A:AF:DF:92:CC:E0:B4:3F:F3:BE:C5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/8c842234-5cac-3023-af77-9c58ff2c7c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:22:02:78:b1:18:38:be:b3:9d:56:7c:35:c2:16:42:98:86:
         95:d7:45:9a:ad:f5:c5:59:eb:29:28:8e:c7:5d:e7:86:38:f2:
         26:11:e9:52:86:53:af:82:c2:5c:4b:87:c7:89:81:f2:13:97:
         57:fd:a7:1d:ef:86:a5:b7:ba:3b:04:a9:22:57:69:8e:49:ca:
         fa:87:6f:8e:a5:a8:09:1a:ed:64:12:17:0a:87:eb:7c:97:1e:
         90:16:12:0d:53:46:1f:0d:3b:76:cb:de:6d:66:a4:29:d7:82:
         fd:81:f5:17:c4:09:f5:3f:a1:ea:97:49:f0:83:fc:0e:f9:9b:
         03:e6:16:61:f4:57:d8:4d:96:0b:11:9c:d2:8f:f2:be:89:02:
         02:c5:fc:4b:58:13:37:3f:2c:e6:e2:75:79:33:7a:61:1c:66:
         20:68:18:a3:5e:72:cc:ba:02:fd:ab:86:d3:dd:00:5d:14:a9:
         fa:e3:77:27:00:af:09:12:ff:7e:b8:ae:2b:a8:70:42:7b:ed:
         47:ce:94:39:07:19:90:21:8a:24:f8:76:72:de:de:9e:fd:a8:
         10:24:ad:78:54:b3:f8:ab:47:14:99:e4:6f:b6:c9:7c:2d:c3:
         25:c5:21:04:8a:60:8b:63:98:e5:e6:da:f3:8a:7e:e5:70:d4:
         af:4a:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:57 2026 by rpki-client